[workflow-audit] 1 unexplained change(s) on 2026-09-29

[github-actions]

1 unexplained commit(s) in the audit window (.github/workflows/ .config/tend.yaml .github/audit/ .vscode/) since 2026-09-28T15:21:14Z.

Renovate pin bumps, reproducible tend regenerations, clean merges, and
commits first pushed by an admin are classified and omitted — see the
run summary for what was skipped.
Everything below needs a human to account for it.

edf68dd — Run tend-weekly after the Sunday 15:00 UTC quota reset

• Author: dormouse-bot 287024035+dormouse-bot@users.noreply.github.com (self-declared; not proof of origin)
• First pushed by: dormouse-bot (branch_creation)
• Date: 2026-09-28 16:09:42 +0000
• Refs: main,remotes/origin/daily/review-runs-36447816229 remotes/origin/fix/docs-parser-img-and-list-fence,remotes/origin/fix/hosted-preflight-test-isolation remotes/origin/fix/push-seal-test-flake,remotes/origin/fix/workspace-kill-shortcut remotes/origin/hosted-policy-effective,remotes/origin/hosted-provider-activation remotes/origin/main,remotes/origin/one-time-connect
• Files:
  • .config/tend.yaml
  • .github/workflows/tend-weekly.yaml
• View diff

[dormouse-bot]

edf68dd is the only commit on #816, which the tend-review-runs sweep 36447816229 opened from branch daily/review-runs-36447816229. nedtwigg merged it on 2026-09-28 at 16:22 UTC as merge commit f6257a5. The diff moves the tend-weekly cron to 17 15 * * 0 in .config/tend.yaml and regenerates .github/workflows/tend-weekly.yaml to match, so the scheduled run lands after the Sunday 15:00 UTC quota reset. The branch was pushed by the bot and merged by an admin, so it doesn't fit the audit's "first pushed by an admin" omission, but nothing about it is unexplained.